snort入侵检测系统体系结构分析

【摘要】 snort入侵检测系统是一款开放源代码的轻量级的网络入侵检测系统,在实际应用和入侵检测研究中得到广泛使用。本文将主要介绍snort入侵检测系统的架构,并对数据包嗅探、解码、预处理、检测和输出模块进行重点分析,为进一步研究网络入侵检测系统和提高其性能提供了理论依据。更多还原

【Abstract】 Snort is an open source Network Intrusion Dection System。 It is extensively used in real application and science research.The text will mainly represent snort architecture,and ananlyse its subsystems,such as capturing packets,decoding packets,propressing packets,decting and outputting,to provide the theory fundament and experience in order that we research network intrusion system and promote its performance.更多还原